Bug#297203: kernel-source-2.6.8: race which could allow for privilege escalation on Radeon

[Horms <horms@debian.org>]

On Sun, Feb 27, 2005 at 10:59:03PM +0100, Stefan Fritsch wrote:
> Package: kernel-source-2.6.8
> Version: 2.6.8-13
> Severity: critical
> Tags: security
> Justification: root security hole
> 
> There is a race condition in the radeon driver which has been fixed
> in 2.6.11-rc4. This is part of BID-12555:
> http://www.securityfocus.com/bid/12555
> 
> The same code is already in 2.6.8
> 
> The corresponding changeset is at:
> http://linux.bkbits.net:8080/linux-2.6/cset%4042088d17CO1mOAfgW4R46WRTm9gkwA?nav=index.html|ChangeSet@-3w

Thanks, I have added this to SVN for 2.6.8 and should appear in the next
release.

For the record:
The patch seems to already be present in 2.6.11.
And the bug does not seem to be present in 2.4.27.

-- 
Horms